I am using the backported.org package of ClamAV:
$ clamscan --version clamscan / ClamAV version 0.67+CVS20040221
So far clam has been catching 90% of the viruses that are sent to the server, but it has missed a few others. I downloaded the specific virus itself and tried to submit it using the online scanner [http://www.gietl.com/test-clamav/] and the results are:
File is valid, and was successfully uploaded.
clamav scans the file ...
Clamav-Output:
/tmp/phpDkbyoR: Worm.SomeFool.B FOUND
And found something:
Worm.SomeFool.B
Since clamav already recognizes the content you submitted there is no reason to resubmit it.
But my local copy is not working. I checked the syslog and it says nothing other then the message is clean. Any ideas where to start checking?
What is your exact setup, i.e. what is the "glue" between your mailer and clam? clamav-milter, amavisd-new, ... ?
If in doubt, please send me (an URL to) the sample in private (I'm the co-maintainer for debian packages).
Thomas
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
